kira 1.4

- Fixed an invalid connect-src CSP entry that caused browser warnings.
- Added configurable API reverse proxy routing in config.json.
- Forward upstream cache and content headers needed by frontend clients.
- Improved proxy error handling with explicit 502 JSON responses.
- Updated readme